High Risk Breach to Sensitive User Data - Sorting an INLINE LIST is deleting the filter settings

See the video. It’s specifically when using a date field for the sort from what I can tell, but might be broader.

See video here: https://www.loom.com/share/494f659beccc4ffbb4df7ffb2f1e38f3

2 Likes

URL gives a 404 for me

1 Like

That will have to remain a loom mystery. I went ahead and made a new video. This is a scary bug - critical to fix because it puts sensitive user data AT RISK for public exposure. Important to watch both videos - I made the second one when I experienced a variation on the issue. Thank you!

Yeah…weird. A sort should wipe a filter…

1 Like

It makes me supr nervous (pun intended haha) -I’m right now separating the sheets for public vs. private recognition (better practice not to lump public and private data on same sheet anyway). It was another newbie mistake! So rule #1 don’t rely on filters if it isn’t necessary, especially if you have sensitive data being filtered OUT. Not a slight to Glide - these things happen and we have to structure things in the safest way!

On a different note, whats the black icon with a magnifying glass when you hover over the tile images? That’s not Glide is it? Chrome Extension of some kind?

Ha! I didn’t even notice the magnifying glass till you pointed it out. So, it has to be related to the Pinterest Extension because it pops up at the same time as the pinterest logo over to the left!

We’ve confirmed the issue and will be releasing a fix soon.

3 Likes

Also, please use the Row Owner feature for the most secure access control. This guarantees that users can only download data for which they are the owner.

3 Likes

I have rowID enabled on all tabs (is that same as row owner)?. The issue here is that the inline list
in this case displays many rows with different owners, public praise and private tips written to same sheet and private were being filtered out - until the filter issue. Better structure is to write the sensitive data to another sheet and I have now done that…

Please see https://www.glideapps.com/support?q=Row%20owner

1 Like

Ah, I see I haven’t read this before. Still learning - thank you!

2 Likes